Selefra is an open-source cloud governance tool to analyze multi-cloud assets for security, compliance, and policy enforcement.
- Detect-to-Remediate: discover and remediate unnoticed risky problems in one stop.
- Provider Agnostic: reduce switching cost between isolated control planes.
- Ease-of-Use: simplified usage to write and maintain for quick fixes and long-term usage.
With rules written in YAML and SQL, Selefra automatically pulls data from providers including AWS, GCP, Azure, and more.
For example, a rule to check if AWS S3 bucket is misconfigured:
selefra:
name: selefra-demo
cli_version: ">=0.0.1"
providers:
- name: aws
source: 'selefra/aws'
version: "latest"
connection:
type: postgres
username: postgres
password: pass
host: localhost
port: 5432
database: postgres
sslmode: disable
providers:
- name: aws
regions:
- us-east-1
rules:
- name: Disabled_MFA
query: select * from aws_iam_users where user_name = '<root_account>' and mfa_active = 'f'
labels:
severity: Critical
metadata:
title: "MFA is disabled for root user"
description: "MFA is disabled for root user"
output: "AWS user has disabled MFA, username: {{.user_name}}"
For detailed instructions on prerequisites, check Get Started for more info.
Otherwise, run a demo through the following steps, it should take less than a few miniutes:
download packages to install Selefra.
If you are MacOS user, tap Selefra with Homebrew.
brew tap selefra/tap
Now, install Selefra
brew install selefra/tap/selefra
selefra init selefra-demo && cd selefra-demo
selefra apply
See Docs for best practices and detailed instructions. In docs, you will find info on installation, CLI usage, project workflow and more guides on how to accomplish cloud inspection tasks.
Selefra is a community-driven project, we welcome you to open a GitHub Issue to report a bug, suggest an improvement, or request new feature.
- Join Selefra Community on Slack. We host
Community Hour
for tutorials and Q&As on regular basis. - Follow us on Twitter and share your thoughts!
For developers interested in building Selefra codebase, read through Contributing.md and Selefra Roadmap. Let us know what you would like to work on!